QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2016-15058

Back to search

CVE-2016-15058

Published: Apr 3, 2026

Modified: May 14, 2026

PUBLISHED

CVSS v3.1

8.1

HIGH

Description

Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is enabled. Attackers with local network access can sniff SNMP traffic or extract configuration data to recover plaintext credentials and gain unauthorized administrative access to the switches.

VendorProductVersions

Belden

Hirschmann HiLCOS Classic Platform

unaffected
>= 09.0.06
unaffected
>= 05.3.07
affected
0 - <= 09.0.05
affected
0 - <= 05.3.06

Weaknesses (CWE)

CWE-257

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now